chore(deps): bump the minor-updates group with 5 updates by dependabot[bot] · Pull Request #61 · YasharF/hackathon-starter

dependabot · 2026-03-05T11:10:14Z

Bumps the minor-updates group with 5 updates:

Package	From	To
@langchain/langgraph	`1.1.5`	`1.2.0`
@langchain/langgraph-checkpoint-mongodb	`1.1.7`	`1.2.0`
multer	`2.0.2`	`2.1.1`
pdfjs-dist	`5.4.624`	`5.5.207`
globals	`17.3.0`	`17.4.0`

Updates @langchain/langgraph from 1.1.5 to 1.2.0

Release notes

Sourced from @langchain/langgraph's releases.

@langchain/langgraph-checkpoint-mongodb@1.2.0

Minor Changes

#1991 38db67f Thanks @vanb! - Add optional enableTimestamps parameter to MongoDBSaver that sets an upserted_at date via MongoDB's $currentDate operator on every upsert. Useful for MongoDB TTL indexes, auditing, or debugging.

@langchain/langgraph@1.2.0

Minor Changes

#2002 fce9d38 Thanks @hntrl! - feat(langgraph): add Overwrite class for bypassing channel reducers

Adds an Overwrite class and OverwriteValue type that allow nodes to bypass reducers in BinaryOperatorAggregate channels, writing values directly instead of passing them through the reducer function. This is useful when a node needs to replace accumulated state rather than append to it.

New Overwrite class exported from @langchain/langgraph

BinaryOperatorAggregate channel detects OverwriteValue and sets the value directly

Annotation, StateSchema, and zod schema type mappings updated to include OverwriteValue in update types

Patch Changes

#1992 937f780 Thanks @christian-bromann! - fix(core): don't trace channel read/writes

#1984 aa8e878 Thanks @colifran! - feat: add tools stream mode for tool lifecycle events

Updated dependencies [aa8e878, 1b088e5]:

@langchain/langgraph-sdk@1.6.5

@langchain/langgraph-api@1.1.14

Patch Changes

#1984 aa8e878 Thanks @colifran! - feat: add tools stream mode for tool lifecycle events

Updated dependencies [aa8e878, 1b088e5]:

@langchain/langgraph-sdk@1.6.5

@langchain/langgraph-ui@1.1.14

@langchain/langgraph-cli@1.1.14

Patch Changes

Updated dependencies [aa8e878]:

@langchain/langgraph-api@1.1.14

@langchain/langgraph-ui@1.1.14

No release notes provided.

@langchain/langgraph-api@1.1.13

Patch Changes

#1960 4ebe31e Thanks @hntrl! - relax langsmith dep

Updated dependencies []:

@langchain/langgraph-ui@1.1.13

... (truncated)

Changelog

Sourced from @langchain/langgraph's changelog.

1.2.0

Minor Changes

#2002 fce9d38 Thanks @hntrl! - feat(langgraph): add Overwrite class for bypassing channel reducers

Adds an Overwrite class and OverwriteValue type that allow nodes to bypass reducers in BinaryOperatorAggregate channels, writing values directly instead of passing them through the reducer function. This is useful when a node needs to replace accumulated state rather than append to it.

New Overwrite class exported from @langchain/langgraph

BinaryOperatorAggregate channel detects OverwriteValue and sets the value directly

Annotation, StateSchema, and zod schema type mappings updated to include OverwriteValue in update types

Patch Changes

#1992 937f780 Thanks @christian-bromann! - fix(core): don't trace channel read/writes

#1984 aa8e878 Thanks @colifran! - feat: add tools stream mode for tool lifecycle events

Updated dependencies [aa8e878, 1b088e5]:

@langchain/langgraph-sdk@1.6.5

Commits

6b576f0 chore: version packages (#1995)
fce9d38 feat(langgraph): add Overwrite class for bypassing channel reducers (#2002)
aa8e878 feat: add tools stream mode for tool lifecycle events (#1984)
937f780 fix(core): don't trace channel read/writes (#1992)
See full diff in compare view

Updates @langchain/langgraph-checkpoint-mongodb from 1.1.7 to 1.2.0

Release notes

Sourced from @langchain/langgraph-checkpoint-mongodb's releases.

@langchain/langgraph-checkpoint-mongodb@1.2.0

Minor Changes

#1991 38db67f Thanks @vanb! - Add optional enableTimestamps parameter to MongoDBSaver that sets an upserted_at date via MongoDB's $currentDate operator on every upsert. Useful for MongoDB TTL indexes, auditing, or debugging.

Changelog

Sourced from @langchain/langgraph-checkpoint-mongodb's changelog.

1.2.0

Minor Changes

#1991 38db67f Thanks @vanb! - Add optional enableTimestamps parameter to MongoDBSaver that sets an upserted_at date via MongoDB's $currentDate operator on every upsert. Useful for MongoDB TTL indexes, auditing, or debugging.

Commits

6b576f0 chore: version packages (#1995)
38db67f feat(checkpoint-mongodb): add opt-in enableTimestamps for upserted_at fie...
See full diff in compare view

Updates multer from 2.0.2 to 2.1.1

Release notes

Sourced from multer's releases.

v2.1.1

Important

Fix CVE-2026-3520 (GHSA-5528-5vmv-3xc2)

What's Changed

chore: add node version to 25.x in CI by @imangas in expressjs/multer#1372

chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 by @dependabot[bot] in expressjs/multer#1378

chore(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by @dependabot[bot] in expressjs/multer#1377

chore(deps): bump github/codeql-action from 3.24.7 to 4.32.4 by @dependabot[bot] in expressjs/multer#1376

chore(deps): bump actions/upload-artifact from 4.5.0 to 7.0.0 by @dependabot[bot] in expressjs/multer#1375

chore(deps): bump actions/checkout from 4.1.1 to 6.0.2 by @dependabot[bot] in expressjs/multer#1374

fix error/abort handling by @ctcpip in expressjs/multer#1373

2.1.1 by @UlisesGascon in expressjs/multer#1380

New Contributors

@imangas made their first contribution in expressjs/multer#1372

@dependabot[bot] made their first contribution in expressjs/multer#1378

Full Changelog: expressjs/multer@v2.1.0...v2.1.1

v2.1.0

Important

Fix CVE-2026-2359 (GHSA-v52c-386h-88mc)

Fix CVE-2026-3304 (GHSA-xf7r-hgr6-v32p)

What's Changed

chore: add funding to package.json by @bjohansebas in expressjs/multer#1346

chore: drop mkdirp dependency by @wojtekmaj in expressjs/multer#1350

chore: drop object-assign dependency by @wojtekmaj in expressjs/multer#1351

chore: drop xtend dependency by @wojtekmaj in expressjs/multer#1352

chore(gitignore): ignore .nyc_output directory by @ShubhamOulkar in expressjs/multer#1332

Fix typo in README-vi.md regarding file upload by @Kunniii in expressjs/multer#1366

Fix typo in README-pt-br.md for array method by @matheushbm192 in expressjs/multer#1367

headers-support-utf8 by @Doc999tor in expressjs/multer#1210

Add Turkish translation (README-tr.md) by @Sabandogan in expressjs/multer#1360

Release: 2.1.0 by @UlisesGascon in expressjs/multer#1371

New Contributors

@wojtekmaj made their first contribution in expressjs/multer#1350

@ShubhamOulkar made their first contribution in expressjs/multer#1332

@Kunniii made their first contribution in expressjs/multer#1366

@matheushbm192 made their first contribution in expressjs/multer#1367

@Doc999tor made their first contribution in expressjs/multer#1210

@Sabandogan made their first contribution in expressjs/multer#1360

Full Changelog: expressjs/multer@v2.0.2...v2.1.0

Changelog

Sourced from multer's changelog.

2.1.1

Fix CVE-2026-3520 (GHSA-5528-5vmv-3xc2)

fix error/abort handling

2.1.0

Add defParamCharset option for UTF-8 filename support (#1210)

Fix CVE-2026-2359 (GHSA-v52c-386h-88mc)

Fix CVE-2026-3304 (GHSA-xf7r-hgr6-v32p)

Commits

368c8a1 2.1.1 (#1380)
7e66481 🐛 fix recursion issue
643571e ✅ add explicit test for client able to send body without abrupt disconnect
e86fa52 fix error/abort handling
ca37779 chore(deps): bump actions/checkout from 4.1.1 to 6.0.2 (#1374)
13088f4 chore(deps): bump actions/upload-artifact from 4.5.0 to 7.0.0 (#1375)
bc6a1d1 chore(deps): bump github/codeql-action from 3.24.7 to 4.32.4 (#1376)
c496e93 chore(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#1377)
fa173d3 chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#1378)
17d7f51 chore: add node version to 25.x in CI
Additional commits viewable in compare view

Updates pdfjs-dist from 5.4.624 to 5.5.207

Release notes

Sourced from pdfjs-dist's releases.

v5.5.207

This release contains improvements for accessibility, font conversion, image conversion, performance, text selection and the viewer.

Changes since v5.4.624

Bump the stable version in pdfjs.config by @timvandermeij in mozilla/pdf.js#20617

Replace the various interfaces in web/interfaces.js with proper classes by @Snuffleupagus in mozilla/pdf.js#20607

Add support for Brotli decompression by @calixteman in mozilla/pdf.js#20610

Change all relevant BasePDFStream implementations to take an actual URL instance by @Snuffleupagus in mozilla/pdf.js#20614

Report loading progress "automatically" when using the PDFDataTransportStream class, and remove the PDFDataRangeTransport.prototype.onDataProgress method by @Snuffleupagus in mozilla/pdf.js#20615

Use the ccittfax decoder from pdfium by @calixteman in mozilla/pdf.js#20613

Avoid to have to download the model when toggling the button in the alt-text image settings dialog (bug 2013899) by @calixteman in mozilla/pdf.js#20621

Let the toggle button in the alt-text dialog downloading (resp. delete) the model and enabling (resp. disabling) alt-text guessing (bug 2014167) by @calixteman in mozilla/pdf.js#20622

Flush the text content chunk only on real font changes (bug 2013793) by @calixteman in mozilla/pdf.js#20624

Improve progress reporting in ChunkedStreamManager, and prevent unnecessary data copy in ChunkedStream.prototype.onReceiveData by @Snuffleupagus in mozilla/pdf.js#20627

Cap the max canvas dimensions in order to avoid to downscale large images in the worker (bug 2014399) by @calixteman in mozilla/pdf.js#20628

Fix Worker was terminated error when loading is cancelled by @andriivitiv in mozilla/pdf.js#20503

In tagged pdfs, TH can be either a column header or a row header (bug 2014080) by @calixteman in mozilla/pdf.js#20623

[api-minor] Update the supported Node.js "patch" versions by @Snuffleupagus in mozilla/pdf.js#20635

Ensure that pending requests are resolved when calling PDFDataTransportStreamReader.prototype.progressiveDone by @Snuffleupagus in mozilla/pdf.js#20634

Normalize the font name in getBaseFontMetrics (issue 20246) by @Snuffleupagus in mozilla/pdf.js#20637

Avoid branching in convertBlackAndWhiteToRGBA by @calixteman in mozilla/pdf.js#20638

Set a pages mapper per loaded document by @calixteman in mozilla/pdf.js#20640

Bump library version to 5.5 by @Snuffleupagus in mozilla/pdf.js#20642

[api-minor] Update the minimum supported Google Chrome version to 118 by @Snuffleupagus in mozilla/pdf.js#20645

Update dependencies and translations to the most recent versions by @timvandermeij in mozilla/pdf.js#20639

Fix a 'FreeText accessibility' integration test by @calixteman in mozilla/pdf.js#20643

Add firefox-devtools-mcp to let AI agents test and debug in Firefox by @marco-c in mozilla/pdf.js#20644

Convert PDFPageProxy.prototype.getTextContent to an asynchronous method by @Snuffleupagus in mozilla/pdf.js#20648

Ends the current drawing session when closing the tab (bug 2015385) by @calixteman in mozilla/pdf.js#20649

Start using Response.prototype.bytes() in the code-base by @Snuffleupagus in mozilla/pdf.js#20651

Move and re-use the stripPath helper function more by @Snuffleupagus in mozilla/pdf.js#20656

Update jbig2 decoder (pdfium@0455e822ded1a5537d826703988e986a33d2d4a1) by @calixteman in mozilla/pdf.js#20655

Enable a couple of additional eslint-plugin-unicorn rules by @Snuffleupagus in mozilla/pdf.js#20654

Fix types to make "gulp typestest" succeeding by @calixteman in mozilla/pdf.js#20641

Avoid parsing skipped range requests in ChunkedStreamManager (PR 10694 follow-up) by @Snuffleupagus in mozilla/pdf.js#20652

Enable the unicorn/prefer-class-fields ESLint plugin rule by @Snuffleupagus in mozilla/pdf.js#20657

Add code coverage for unit tests running in node by @calixteman in mozilla/pdf.js#20658

Add a Codecov badge by @calixteman in mozilla/pdf.js#20659

Remove Object.hasOwn usage from the src/core/xref.js file by @Snuffleupagus in mozilla/pdf.js#20663

Truncate too long /Decode map entries (issue 20668) by @Snuffleupagus in mozilla/pdf.js#20669

Convert the PDFObjects class to use a Map internally by @Snuffleupagus in mozilla/pdf.js#20673

Fix the keyboard accessibility of the manage button in the thumbnails view (bug 2015916) by @calixteman in mozilla/pdf.js#20675

fix: support text selection under search highlights by @matt-atticus in mozilla/pdf.js#20463

Fix code coverage line mapping by @calixteman in mozilla/pdf.js#20665

Remove unused CanvasGraphics properties (PR 700 follow-up) by @Snuffleupagus in mozilla/pdf.js#20682

Add an aria-label to the checkboxes in the thumbnails view (bug 2016136) by @calixteman in mozilla/pdf.js#20678

Correctly handle tab/page down when on a menu (bug 2016212) by @calixteman in mozilla/pdf.js#20681

Add an aria-label to the sidebar resizer (bug 2016142) by @calixteman in mozilla/pdf.js#20679

Add support for deleting, cutting, copying and pasting pages (bug 2010830, 2010831) by @calixteman in mozilla/pdf.js#20670

Add the possibility to navigate with the keyboard to go from a checkbox to an other in the thumbnail view (bug 2016007) by @calixteman in mozilla/pdf.js#20677

... (truncated)

Commits

5279646 Merge pull request #20751 from calixteman/bug2016693
98d0332 Merge pull request #20767 from calixteman/followup_20742
c1fe547 Add an integration test for the issue fixed in #20742
62ceac6 Merge pull request #20769 from timvandermeij/updates
3d2d145 Fix vulnerabilities in dependency versions
ced9b47 Upgrade c8 to version 11.0.0
4cb0d50 Update dependencies to the most recent versions
5cbb841 Merge pull request #20768 from calixteman/rm_yargs
1861a4c Merge pull request #20756 from Snuffleupagus/PDFDataRangeTransport-tests
f32b9d2 Merge pull request #20738 from Snuffleupagus/function-shorten
Additional commits viewable in compare view

Updates globals from 17.3.0 to 17.4.0

Release notes

Sourced from globals's releases.

v17.4.0

Update globals (2026-03-01) (#338) d43a051

sindresorhus/globals@v17.3.0...v17.4.0

Commits

a9cfd74 17.4.0
d43a051 Update globals (2026-03-01) (#338)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-updates group with 5 updates: | Package | From | To | | --- | --- | --- | | [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.1.5` | `1.2.0` | | [@langchain/langgraph-checkpoint-mongodb](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/checkpoint-mongodb) | `1.1.7` | `1.2.0` | | [multer](https://github.com/expressjs/multer) | `2.0.2` | `2.1.1` | | [pdfjs-dist](https://github.com/mozilla/pdf.js) | `5.4.624` | `5.5.207` | | [globals](https://github.com/sindresorhus/globals) | `17.3.0` | `17.4.0` | Updates `@langchain/langgraph` from 1.1.5 to 1.2.0 - [Release notes](https://github.com/langchain-ai/langgraphjs/releases) - [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md) - [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.2.0/libs/langgraph-core) Updates `@langchain/langgraph-checkpoint-mongodb` from 1.1.7 to 1.2.0 - [Release notes](https://github.com/langchain-ai/langgraphjs/releases) - [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/checkpoint-mongodb/CHANGELOG.md) - [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph-checkpoint-mongodb@1.2.0/libs/checkpoint-mongodb) Updates `multer` from 2.0.2 to 2.1.1 - [Release notes](https://github.com/expressjs/multer/releases) - [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md) - [Commits](expressjs/multer@v2.0.2...v2.1.1) Updates `pdfjs-dist` from 5.4.624 to 5.5.207 - [Release notes](https://github.com/mozilla/pdf.js/releases) - [Commits](mozilla/pdf.js@v5.4.624...v5.5.207) Updates `globals` from 17.3.0 to 17.4.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.3.0...v17.4.0) --- updated-dependencies: - dependency-name: "@langchain/langgraph" dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: "@langchain/langgraph-checkpoint-mongodb" dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: multer dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: pdfjs-dist dependency-version: 5.5.207 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: globals dependency-version: 17.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 5, 2026

github-actions bot merged commit 1e2bc05 into master Mar 5, 2026
3 checks passed

dependabot bot deleted the dependabot/npm_and_yarn/master/minor-updates-112b1f04d8 branch March 5, 2026 11:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the minor-updates group with 5 updates#61

chore(deps): bump the minor-updates group with 5 updates#61
github-actions[bot] merged 1 commit intomasterfrom
dependabot/npm_and_yarn/master/minor-updates-112b1f04d8

dependabot bot commented on behalf of github Mar 5, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 5, 2026

@​langchain/langgraph-checkpoint-mongodb@​1.2.0

Minor Changes

@​langchain/langgraph@​1.2.0

Minor Changes

Patch Changes

@​langchain/langgraph-api@​1.1.14

Patch Changes

@​langchain/langgraph-cli@​1.1.14

Patch Changes

@​langchain/langgraph-ui@​1.1.14

@​langchain/langgraph-api@​1.1.13

Patch Changes

1.2.0

Minor Changes

Patch Changes

@​langchain/langgraph-checkpoint-mongodb@​1.2.0

Minor Changes

1.2.0

Minor Changes

v2.1.1

Important

What's Changed

New Contributors

v2.1.0

Important

What's Changed

New Contributors

2.1.1

2.1.0

v5.5.207

Changes since v5.4.624

v17.4.0

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@langchain/langgraph-checkpoint-mongodb@1`.2.0

`@langchain/langgraph@1`.2.0

`@langchain/langgraph-api@1`.1.14

`@langchain/langgraph-cli@1`.1.14

`@langchain/langgraph-ui@1`.1.14

`@langchain/langgraph-api@1`.1.13

`@langchain/langgraph-checkpoint-mongodb@1`.2.0